Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B213B796F45611EFBA255A64762E951A.roa
File: B213B796F45611EFBA255A64762E951A.roa (raw, json)
Hash identifier: fgGBAzKgyvLjapR9OpliBRfVc2PesoTQC29pIXTpEx4=
Subject key identifier: FE:6E:94:B8:AE:F3:9F:3E:52:67:FA:95:12:FB:12:3C:28:C7:16:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01344D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B213B796F45611EFBA255A64762E951A.roa
Signing time: Wed 26 Feb 2025 15:31:06 +0000
ROA not before: Wed 26 Feb 2025 15:31:03 +0000
ROA not after: Thu 19 Feb 2026 15:31:03 +0000
asID: 984
IP address blocks: 156.252.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78925 (0x1344d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:31:03 2025 GMT
Not After : Feb 19 15:31:03 2026 GMT
Subject: CN=67bf33ba-deaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:a4:d3:5d:0b:62:7c:71:4e:d5:2c:e8:a2:
bf:30:a5:25:44:6e:e7:89:72:5f:8d:b5:d0:58:76:
db:23:b3:d9:fc:5b:ae:32:22:9f:fc:9c:09:1c:c1:
ec:9d:25:8d:a8:bc:fd:ed:62:46:de:0d:1f:72:70:
ff:74:58:62:86:1e:bc:73:e6:b4:6e:77:5d:dc:d2:
fe:1d:b4:f7:5b:77:4e:68:09:26:aa:ca:e5:17:8c:
48:e6:47:0a:cf:97:47:8f:27:fe:50:de:7e:aa:10:
dd:c3:14:35:05:e9:26:b5:b9:00:c9:78:e7:e0:46:
f2:8f:dd:18:95:9c:d6:54:a0:4a:1b:e5:ec:39:d6:
9e:34:a2:3a:d3:4d:8d:1f:60:bb:1f:21:89:97:bc:
d6:0d:f8:7a:77:db:3b:8f:35:99:ad:e5:bd:14:d6:
32:bb:30:20:29:cd:33:12:ab:a2:e7:62:0d:a1:1e:
38:19:10:87:64:47:ac:cf:e4:e4:fb:57:b8:38:ff:
04:74:92:51:9c:6a:fe:e4:ba:eb:da:21:32:8a:0f:
75:a1:d1:ec:8c:2e:ad:a9:08:2d:65:0d:e4:94:fc:
80:24:e3:7e:cb:93:6a:25:50:be:db:5c:98:a6:d4:
ae:46:8e:b8:cb:6b:99:00:36:1b:9a:d1:d3:b3:f2:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6E:94:B8:AE:F3:9F:3E:52:67:FA:95:12:FB:12:3C:28:C7:16:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B213B796F45611EFBA255A64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:26:5b:45:51:89:ab:5c:ef:42:af:84:d3:c0:9d:0d:5a:56:
aa:09:03:61:a1:2f:1b:a2:cb:3f:b2:d0:fd:65:81:27:5a:21:
dc:e4:74:ba:58:2e:69:e0:bc:d2:c7:a8:ab:15:ef:8f:92:8c:
27:7a:17:d1:af:f5:18:1c:0d:27:40:6e:58:37:88:17:0e:47:
c9:30:23:d5:de:bb:04:84:ab:b5:7f:e4:b5:f5:13:0a:e3:aa:
79:68:e1:4a:1b:23:ce:59:51:8e:1f:75:ed:d0:6b:e1:37:d4:
e0:72:da:6e:fd:21:67:49:86:7a:6e:d1:f3:51:c6:72:68:02:
7e:28:51:fa:8d:26:6d:f9:ab:8d:20:88:1c:d0:d5:09:e5:6b:
31:25:e1:a4:bf:2c:02:f7:e2:74:08:c7:ad:b3:c7:fd:d4:62:
a5:04:f0:1d:c8:13:f7:1f:c8:ae:01:14:41:5d:e1:9a:3e:64:
15:fb:4d:35:0a:5d:4a:c6:67:0b:6f:05:8e:fd:f2:ce:53:f1:
0e:19:4d:d1:81:c1:3a:b3:ca:f8:cd:85:7f:0b:ec:c8:cf:83:
d9:a5:97:8b:40:8f:09:30:30:0f:57:1d:4e:2d:2f:6a:4b:2b:
16:de:0a:cc:fb:da:c4:7a:5e:c1:dd:e2:05:eb:01:78:0b:0e:
a7:f9:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:43 2025 by rpki-client